puppetlabs/bolt

add `host-key-check: new` as an option to match normal SSH clients

nergdron opened this issue · 3 comments

Use Case

it's a pain for us to add a bunch of host keys manually before using them with bolt, or when onboarding new hires, or really doing anything from our CI platform. we also don't want to disable host key checking entirely, if there's an accepted key for a host we want it to error out if that changes.

Describe the Solution You Would Like

it'd be great if there was a new option to host-key-check with the built-in ssh transport that behaved the same way as StrictHostKeyChecking accept-new in openssh. see: #3154

Describe Alternatives You've Considered

we can use the native-ssh transport, but then we lose the proper configuration for proxyjump, which is also essential for our environment.

This issue has not had activity for 60 days and will be marked as stale.
If this issue continues to have no activity for 7 days, it will be closed.

This issue is stale and has been closed. If you believe this is in error,
or would like the Bolt team to reconsider it, please reopen the issue.

this is not done as far as I know. not sure why you'd close things after 60 days when nobodoy from the team even looked at it from what I can see.